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ESOH  Presentation 

■  Use  the  System  Safety  methodology  across  the  ESOH  disciplines 
to  manage  ESOH  risks  as  part  of  the  systems  engineering  process 

■  ESOH  refers  to  all  individual,  but  interrelated,  disciplines  that 
encompass  environment,  safety,  and  occupational  health 

■  Use  MIL-STD-882D,  the  DoD  Standard  Practice  for  System  Safety, 
in  all  developmental  and  sustaining  engineering  activities 


MIL-STD-882D  Change  1,  the  DoD  Standard  Practice  for 
System  Safety:  ESOH  Risk  Management 

Change  1  seeks  to  be  more  inclusive  of  the  E  in  ESOH 
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Overview 


❖ 


■  MIL-STD-882D  ESOH  Risk  Management 

■  882D  Change  1  Environmental  Adds  -  Task  210 

■  Task  210  Example  of  an  Environmental  Hazard 
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MIL-STD-882D 
ESOH  Risk  Management 


❖ 


1. 

Document  the  System  Safety  approach  (PESHE) 

2. 

Identify  hazards 

3. 

Assess  risk 

4. 

Identify  mitigation  measures 

SYSTEM  SAFETY  ORDER  OF  PRECIDENCE 

5. 

Reduce  risk 

1 .  Eliminate  hazards  through  design  selection 

2.  Reduce  risk  through  design  alteration 

6. 

Verify  risk  reduction 

3.  Incorporate  engineered  features  or  devices 

4.  Provide  warning  devices 

7. 

Accept  risk 

5.  Develop  procedures  and  training 

8. 

Manage  life-cycle  risk 

Risk  =  Severity  x  Probability 
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MIL-STD-882D  ESOH 
Risk  Assessment  Matrix 


RISK  ASSESSMENT  MATRIX 


SEVERITY 

PROBABILITY 


Catastrophic 

(1) 


Critical 

(2) 


Marginal 

(3) 


Negligible 

(4) 


Frequent 

(A) 


1  I 


High 


Probable 

(B) 


High 


High 


Serious 


Medium 


Medium 


L'j'j'J 
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Family 


ESOH  Risk  -  Severity 


- \ 

SEVERITY  CATEGORIES 

Severity 

Category 

Severity 

Level 

Environment  Safety,  and  Occupational 

Health  Mishap  Result  Criteria 

Catastrophic 

1 

Could  result  in  one  or  more  of  the  following:  death,  permanent  total  disability,  irreversible 
significant  environmental  impact,  or  loss  exceeding  $10M. 

Critical 

2 

Could  result  in  one  or  more  of  the  following:  permanent  partial  disability,  injuries  or 
occupational  illness  that  may  result  in  hospitalization  of  at  least  three  personnel,  reversible 
significant  environmental  impact,  or  loss  exceeding  $1M  but  less  than  $10M, 

Marginal 

3 

Could  result  in  one  or  more  of  the  following:  injury  or  occupational  illness  resulting  in  10 
or  more  lost  work  days,  reversible  moderate  environmental  impact,  or  loss  exceeding 
$1QQK  but  less  than  $1M. 

Negligible 

4 

Could  result  in  one  or  more  of  the  following:  injury  or  illness  resulting  in  less  than  10  lost 
work  days,  minimal  environmental  impact,  or  loss  less  than  $100K. 

.  / 

OoD.MIL-STO-882.OOt 


Mishap.  An  unplanned  event  or 
series  of  events  resulting  in 
death,  injury,  occupational 
illness,  damage  to  or  loss  of 
equipment  or  property,  or 
damage  to  the  environment. 

For  the  purposes  of  this 
document,  the  term  “mishap” 
includes  negative 
environmental  impacts  from 
planned  and  unplanned  events 
and  accidents 

Note:  Severity  generally 
does  not  change  unless  a 
design  change  is  made 
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ESOH  Risk  -  Probability 


PROBABILITY  LEVELS 

Description 

|  Level  ||  Specific  Individual  Item1-2 

|  Fleet  or  Inventory2 

Frequent 

A 

Likely  to  occur  often  in  the  life  of  an  item;  with  a 
probability  of  occurrence  greater  than  10''  in  that  life. 

Continuously 

experienced. 

Probable 

B 

Will  occur  several  times  in  the  life  of  an  item;  with  a 
probability  of  occurrence  less  than  10 1  but  greater 
than  102  in  that  life. 

Will  occur 
frequently. 

Occasional 

C 

Likely  to  occur  sometime  in  the  life  of  an  item;  with  a 
probability  of  occurrence  less  than  10 2  but  greater 
than  10 3  in  that  life. 

Will  occur  several 
times. 

Remote 

D 

Unlikely,  but  possible  to  occur  in  the  life  of  an  item; 
with  a  probability  of  occurrence  less  than  Ifr3  but 
greater  than  ICf6  in  that  life. 

Unlikely  but  can 
reasonably  be  expected 
to  occur. 

Improbable 

E 

So  unlikely,  it  can  be  assumed  occurrence  may  not 
be  experienced  in  the  life  of  an  item;  with  a 
probability  of  occurrence  of  less  than  10-6  in  that  life. 

Unlikely  to  occur,  but 
possible 

Eliminated3 

F 

Incapable  of  occurrence  in  the  life  of  an  item. This 
category  is  used  when  potential  hazards  are 
identified  and  later  eliminated. 

Incapable  of  occurrence 
within  the  life  of  an 
item.  This  category  is 
used  when  potential 
hazards  are  identified 
and  later  eliminated. 

DoD_MIL-$TD-882_002 
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Family 


882D  Change  1 
Environmental  Adds 


■  882D  aleady  provides  a  methodology  for  risk  management 

■  Revising  MIL-STD-882Dto  be  better  suited  for  managing 
environmental  issues  as  part  of  the  Systems  Engineering  process 

■  Tasks  are  being  added  to  address  environmental  considerations 

■  Task  105  -  Hazard  Tracking  System 

■  Task  107 -HMMP 

■  Task  210  -  Environmental  Hazard  Analysis 
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New  Task  210 


❖ 


■  Task  210:  Environmental  Hazard  Analysis 

■  Purpose:  Use  System  Safety  process  to  identify  environmental 
hazards,  assess  the  associated  risk,  identify  potential  mitigation 
measures,  implement  chosen  measures,  reassess  the  risk,  and 
obtain  formal  risk  acceptance 

■  Task  Structure: 

■  210.1  Purpose 

■  210.2  Task  Description 

■  Using  System  Safety  process  and  risk  matrix 

■  Identifying  environmental  requirements  and  hazards 

■  Environmental  analysis  considerations 

■  Reporting  Requirements 

■  210.3  Details  to  be  Specified 
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Year  of  the  Air  Force  Identifying  Envi ron  mental 

* Requirements 

■  Critical  step  to  including  requirements  not  directly  linked  to  risk 
management 

■  Examples: 

■  Pollution  Prevention  goals 

■  Not  using  Ozone  Depleting  Substances 

■  Not  using  hexavalent  chrome 

■  Provides  vehicle  for  environmental  requirements  to  be  included  in 
system  design  and  development 

■  Requirements  need  to  trace  to  a  JCIDS  requirement 
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Task  210  Example  of  an 
Environmental  Hazard 


Example -Contaminated  Wash  Water  from  Nickel-Cadmium  Plated  Compressor  Blades  on  T-56  Turboprop  Engine 

Hazard 

Description 

Initial 

Severity 

Initial 

Prob. 

Initial 

Risk 

Category 

Risk  Mitigation 

Target 

Severity 

Target 

Prob. 

Target 

Risk 

Category 

Status 

Contaminated 

Cadmium 

2 

B 

High 

1 00  percent  capture 

3 

c 

Med 

Closed.  This  Program 

wash  water  from 

contaminated 

mandate  for  engine 

implemented  this  risk  mitigation 

Ni-Cd  Plated 

wash  water 

wash  water 

measure,  verified  its  effectiveness 

Compressor 

effluent  a  NPS 

requiring  all  DoD 

in  reducing  the  risk,  and  the  PM 

Blades 

water  pollutant 

facilities  to  capture, 

accepted  the  FRC.  However,  the 

in  violation  of 

contain,  and 

PM  directed  that  during 

State  law 

properly  treat  or 

subsequent  rework/upgrade  of  the 

(regulation  of 

dispose  of  wash 

T-56  turboprop  engine  an 

storm  water 

water  effluent. 

alternative  risk  mitigation  measure 

discharge/NPD 

ES)  with 
potential  for 
citations  with 

must  eliminate  the  hazard. 

fines,  and  civil 
and/or  criminal 
liability  for 
improper 

Closed.  The  Program  verified  that 

disposal  of 

new  Al  blade  design  eliminated 

hazardous 

2 

B 

High 

None 

None 

None 

the  hazard.  Thus,  the  PM  had  no 

waste. 

Cadmium 

Develop  new 

residual  risk  to  accept. 

contaminated 

compressor  blades 

drinking  water 

made  of  aluminum 

can  result  in 

to  replace  the  Ni-Cd 

acute  and 

plated  blades.  New 

chronic  health 

blade  design  will 

efforts. 

eliminate  the 
possibility  of  Cd 
leaching  into  the 
wash  water  effluent 
by  eliminating  the 
use  of  a  hazardous 
material. 
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Hazard  Description 


❖ 


Hazard 

Description 

Contaminated 
wash  water  from 
Ni-Cd  Plated 
Compressor 
Blades 

Cadmium  contaminated  wash  water  effluent  a 
NPS  water  pollutant  in  violation  of  State  law 
(regulation  of  storm  water  discharge/NPDES) 
with  potential  for  citations  with  fines,  and  civil 
and/or  criminal  liability  for  improper  disposal  of 
hazardous  waste.  Cadmium  contaminated 
drinking  water  can  result  in  acute  and  chronic 
health  efforts. 

As  of:  17  Jun  2010 
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Year  of  the  Air  Force 
Family 


Initial  Risk  Assessment 


Initial 

Severity 

Initial 

Probability 

Initial  Risk 
Category 

2 

B 

High 

As  of:  17  Jun  2010 
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What  is  the  Severity? 


OoD.MIL-STO-882.OOt 
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What  is  the  Probability? 


DoD_M  I  L-STD-882_002 
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Mitigations  and  Initial 

Target  Risk  #1 


Risk  Mitigation 

Target 

Severity 

Target 

Probability 

Target 

Risk 

Category 

Status 

100  percent 
capture  mandate 
for  engine  wash 
water  requiring  all 
DoD  facilities  to 
capture,  contain, 
and  properly  treat 
or  dispose  of 
wash  water 
effluent. 

3 

c 

Med 

Closed.  This  Program 
implemented  this  risk 
mitigation  measure, 
verified  its  effectiveness 
in  reducing  the  risk,  and 
the  PM  accepted  the 

FRC.  However,  the  PM 
directed  that  during 
subsequent 

rework/upgrade  of  the  T- 
56  turboprop  engine  an 
alternative  risk  mitigation 
measure  must  eliminate 
the  hazard. 

As  of:  17  Jun  2010 
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Year  of  the  Air  Force 
Family 


Mitigations  and  Final 

Target  Risk  #2 


Risk  Mitigation 

Target 

Severity 

Target 

Probability 

Target 

Risk 

Category 

Status 

Develop  new 
compressor  blades 
made  of  aluminum 
to  replace  the  Ni-Cd 
plated  blades.  New 
blade  design  will 
eliminate  the 
possibility  of  Cd 
leaching  into  the 
wash  water  effluent 
by  eliminating  the 
use  of  a  hazardous 
material. 

None 

F 

Eliminated 

Closed.  The  Program  verified 
that  new  Al  blade  design 
eliminated  the  hazard.  Thus, 
the  PM  had  no  residual  risk  to 
accept. 

As  of:  17  Jun  2010 
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Assessed  Risk 


RISK  ASSESSMENT  MATRIX 


SEVERITY 

PROBABILITY 


Frequent 

(A) 


Probable 

(B) 


Occasional 

(C) 


Remote 

(D) 


Improbable 

(E) 


Eliminated 

(F) 


Catastrophic 

(1) 


High 


High 


Serious 


Medium 


Critical 

(2) 


High 


r  ' 

Marginal 

(3) 

Negligible 

(4) 

- 

1 

Serious 

Medium 

Serious 

_  J 

Medium 

A 

Serious 


Medium  4 


Target  Risk  #1 


Lu'jj 


L'j'jj 


E\}Ul)jiiiLbL\ 


Target  Risk  #2 
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Risk  Acceptance 


❖ 


■  ESOH  risks  must  be  accepted  prior  to  exposing  people,  equipment, 
or  the  environment  to  the  hazard 

■  Current  risk 

■  Residual  risk 

■  All  the  mitigations  must  be  verified  and  validated  prior  to  accepting 
final  or  residual  risk 

■  The  residual  risk  is  often  the  same  as  the  target  risk  category,  but  it 
can  differ  if  mitigations  were  proven  more  or  less  effective  than 
expected 
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Questions? 
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